# Redhat Enterprise Linux


- [CVE-2018-14667](https://insights.sbomify.com/CVE-2018-14667/): Red Hat JBoss RichFaces Framework Expression Language Injection (critical 9.8, exploited in the wild)
- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2025-32463](https://insights.sbomify.com/CVE-2025-32463/): Sudo Inclusion of Functionality from Untrusted Control Sphere (critical 9.3, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2025-31277](https://insights.sbomify.com/CVE-2025-31277/): Apple Multiple Products Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2023-5217](https://insights.sbomify.com/CVE-2023-5217/): Google Chromium libvpx Heap Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2023-32373](https://insights.sbomify.com/CVE-2023-32373/): Apple Multiple Products WebKit Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2019-8720](https://insights.sbomify.com/CVE-2019-8720/): WebKitGTK Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2019-11043](https://insights.sbomify.com/CVE-2019-11043/): PHP FastCGI Process Manager (FPM) Buffer Overflow (high 8.7, exploited in the wild)
- [CVE-2026-46300](https://insights.sbomify.com/CVE-2026-46300/): Linux Kernel Missing Initialization of a Variable (high 7.8, exploited in the wild)
- [CVE-2026-31431](https://insights.sbomify.com/CVE-2026-31431/): Linux Kernel Incorrect Resource Transfer Between Spheres (high 7.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/redhat/enterprise-linux/